
Daily Open Source Infrastructure Report 

8 January 2013 



Top Stories 

• A massive raw sewage release of around 300,000 gallons spilled into the Spring Valley 
Creek in Kalamazoo due to a blockage in a sewer pipe. - WKZO 590 AM Kalamazoo (See 
item 15 ) 

• A businessman from Atlanta was indicted for fraud, conspiracy, and other charges relating 
to losses of $23.8 million from the investments of a Pontiac, Michigan, and two Detroit 
pension funds. - Oakland Press (See item 20 ) 

• Researchers have tied ‘Paunch’, the author of the Blackhole exploit kit, to the Cool Exploit 
Kit, and noted that Paunch has been updating both kits with newly-purchased, undisclosed 
exploits. - Krebs on Security (See item 26) 

• A flash mob at the Mall of Louisiana in Baton Rouge involving some 200 juveniles ended 
in a fight January 5 that closed the mall for the rest of the evening. - Baton Rouge 
Advocate (See item 29 ) 
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Energy Sector 



1. January 7, Baton Rouge Advocate - (Louisiana) Texas company fined for faking 
water tests. Houston-based W&T Offshore Inc. was fined $1 million January 3 for 
violations of the Clean Water Act after it was found to have filtered water samples 
before recording them at least six times in 2009. 

Source: http://theadvocate.com/home/4838222-125/texas-companv-finedfor-faking- 
water 
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Chemical Industry Sector 

Nothing to report 



T Return to top] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Banking and Finance Sector 

2. January 7, Softpedia - (International) Algerian hacker wanted in the US arrested by 
Thai police. An Algerian man wanted in the U.S. for allegedly hacking into over 200 
bank and financial institution accounts was arrested by police in Thailand as he was 
attempting to travel from Malaysia to Egypt. He will be extradited to the State of 
Georgia, where an arrest warrant was filed. 

Source: http://news.softpedia.com/news/Algerian-Hacker-Wanted-in-the-US-Arrested- 
by-Thai-Police-319099.shtml 



- 2 - 



3. January 5, Elyria Chronicle-Telegram - (Ohio) Avon Lake man indicted in $11M 
scheme. A man from Avon Lake was indicted on charges that he 

allegedly received $11 million via fake businesses that he used to skim money from 
loans issued by St. Paul Croatian Federal Credit Union, leading to the credit union’s 
collapse. 

Source: http ://chronicle.northcoastno w . com/20 1 3/0 1 /05/avon-lake-man-indicted-in- 
1 lm-scheme/ 

4. January 4, Associated Press - (Arizona) ‘Dynomite’ Bandit uses fake explosives to 
rob Arizona banks, FBI says. The FBI said that the “Dynomite Bandit” robbed one 
bank and attempted to rob two others in the Phoenix area using fake explosives. He was 
given the misspelled moniker due to his explosive devices being fakes. 

Source: http://www.huffingtonpost.com/2013/01/05/dynomite-bandit-bank-robberv- 
arizona n 2415213.html 

5. January 4, Ashbury Park Press - (New Jersey) Owner of Manalapan mortgage 
company admits $7.5M fraud. A co-owner of Hawthorne Capital, a Manalapan 
mortgage company, pleaded guilty to a Ponzi scheme that defrauded more than 40 
individuals of $7.5 million. 

Source: http J/w w w .app . com/article/20 1301 04/NJNEW S 1 4/30 1 040093/Qwner-of- 
Manalapan-mortgage-companv-admits-7-5M-fraud 
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Transportation Sector 

6. January 6, K1RO 7 Seattle - (Washington) Water main break shuts down SR 20 in 
Port Townsend. A water main break January 6 in Port Townsend damaged a business 
building and shut down State Route 20 between Washington Street and the Port 
Townsend ferry terminal. 

Source: http://www.kirotv.com/news/news/large-water-main-breaks-port- 
townsend/nTn5d/ 

7. January 6, KSEE 24 Fresno - (California) Fire damages 20 school busses in south 
Fresno. A fire damaged over 15 school buses parked at the First Student bus yard in 
Fresno, and damage was estimated at $1 million. 

Source: http://www.ksee24.com/local/Fire-Damages-20-School-Buses-in-Fresno- 
185819532.html 

8. January 6, KGTV 10 San Diego - (California) One killed after car, fuel tanker 
collide on Friars Road in Mission Valley. Friars Road was closed in both directions, 
as well as the off-ramp from northbound Interstate 15, for over 6 hours after a driver 
was killed when their car collided with a fuel tanker in Mission Valley. 

Source: http://www.10news.com/news/l-killed-after-car-semi-truck-collide-on-friars- 
road-in-mission- valley-0 1 0620 1 3 
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For another story, see item 14 
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Postal and Shipping Sector 

9. January 6, WWLP 22 Springfield - (Massachusetts) Arrest made in Palmer Post 
Office robbery. Palmer Police arrested and charged a teen with armed robbery after he 
allegedly help up the Thorndike Post Office January 5. 

Source: http://www.wwlp.com/dpp/news/crime/bank robbery/arrest-made-in-palmer- 
po st- office-robbery 
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Agriculture and Food Sector 

10. January 4, Deseret News - (Utah) MTC in Provo working to contain stomach flu 
outbreak. A possible strain of Norovirus affected more than 250 students of the 
Missionary Training Center in Provo, Utah, since December 31, 2012. 

Source: http://www.deseretnews.com/article/865569889/MTC-in-Provo-working-to- 
contain-stomach-flu-outbreak.html 

1 1 . January 4, WDAY 6 Fargo - (Minnesota) Grain elevator is still smoldering in 

Ada. A major fire burned down the Triple Crown grain elevator in Ada, January 4. The 
cause of the fire was unknown. 

Source: http://www.wdav.com/event/article/id/73231/ 

For another story, see item 35 
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Water Sector 

12. January 7, Waterbury Republican-American - (Connecticut) Customers in 3 towns 
lose water after pipe breaks in Seymour. Repairs on a water main break were 
completed January 6 as residents and retail owners in Seymour, Oxford, and Beacon 
Falls were left without water for several hours after a water main break on Route 67. 
Source: http://www.rep-am.com/articles/2013/01/07/news/local/695365.txt 

13. January 7, Associated Press - (Minnesota) Minneapolis to restore water to final 6 
buildings. A water main break the week of December 31 spilled 14 million gallons of 
water in Minneapolis. City officials expected full water service to be restored to the 
remaining buildings by January 6, however a 24 hour boil advisory would be in effect 
to test the water quality. 

Source: http://www.nuiournal.com/page/content.detail/id/278233/Minneapolis-to- 
restore-water-to-final-6-buildings.html?isap=l&nav=5031 
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14. January 6, Atlanta Journal Constitution - (Georgia) Water main break damages 
Clairmont Road near DeKalb Peachtree Airport. Several hundred customers along 
Clairmont Road lost water January 5 and the foundations of the two westbound lanes 
were damaged during a water main break. The county plans to invest $1.35 billion over 
the next 5 years to make over 80 upgrades to the water system. 

Source: http://www.aic.com/news/news/breaking-news/water-main-break-damages- 
clairmont-road-near-dekal/nTn6K/ 

15. January 5, WKZO 590 AM Kalamazoo - (Michigan) Huge raw sewage spill on 
Kalamazoo’s east side triggers health concerns. A massive raw sewage release of 
around 300,000 gallons spilled into the Spring Valley Creek in Kalamazoo due to a 
blockage in a sewer pipe. This is the second major spill in the past 12 months; 600,000 
gallons of sewage overflowed in spring 2012. 

Source: http://wkzo.com/news/articles/2013/jan/05/huge-raw-sewage-spill-on- 
kalamazoos-east-side-triggers-health-concerns/ 

16. January 7, KTXS 12 Sweetwater - { Texas) Colorado City issues boil water notice. A 
water main break left the residents of Colorado City under a boil water notice January 
7. 

Source: http://www.ktxs.com/news/Colorado-City-issues-boil-water-notice/- 
/14769632/18032196/-/llxghmoz/-/index.html 

For more stories, see items 1 and 6 
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Public Health and Healthcare Sector 



17. January 6, Danvers Patch - (Massachusetts) Nursing home evacuated after sewage 
backup. A sewage backup caused about 100 residents to be removed from Twin Oaks 
Care and Rehabilitation Center and placed in other nursing homes around 
Massachusetts. 

Source: http://danvers.patch.com/articles/nursing-home-evacuated-after-sewage-backup 
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Government Facilities Sector 

18. January 7, Charlotte Observer - (South Carolina) 2 York Co. government websites 
hacked. Intruders hacked and posted fake material on two York County government 
Web sites. Officials blocked access to the sites and believed the access occurred 
through an older Web server. 

Source: http://www.charlotteobserver.com/2013/01/07/3769728/vork-co-solicitors- 
office-website.html 

19. January 6, Lexington Herald-Leader - (Kentucky) Officials investigating fire at 
Morehead State University. Investigators were at the scene of a January 6 fire at 
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Morehead State University that damaged a storage and office facility and left four 
firefighters injured. 

Source: http://www.kentuckv.com/2013/01/06/2466565/officials-investigating-fire- 
at.html 



20. January 5, Oakland Press - (Michigan) Atlanta businessman accused of defrauding 
Pontiac, Detroit pension funds. A businessman from Atlanta was indicted for fraud, 
conspiracy, and other charges relating to losses of $23.8 million from the investments 
of a Pontiac, Michigan, and two Detroit pension funds. 

Source: 

http://www.theoaklandpress.com/articles/2013/01/05/news/local news/doc50e89c7639 
25b048600977.txt?viewmode=fullstory 

For another story, see item 7 
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Emergency Services Sector 

21. January 5, Chicago Tribune - (Illinois) 2nd federal escapee caught. An inmate that 
escaped from the Metropolitan Correctional Center was captured January 4, concealed 
in a costume intended to camouflage his identity. 

Source: http://www.chicagotribune.com/news/local/ct-met-iail-escapee-captured- 
20130105,0,4485356,full.story 

22. January 4, Associated Press - (California) Santa Barbara jail yard disturbance 
quelled. An incident that left 6 inmates injured at Santa Barbara County’s Main Jail 
prompted a lockdown through the weekend of January 6. Officials are still investigating 
the occurrence which involved 36 inmates. 

Source: http://www.necn.com/01/04/13/Santa-Barbara-iail-yard-disturbance- 
quel/landing nation.html?&apID=728d9f96ce4f4b72a9184ecl76d86b2f 

23. January 4, Albany Times Union - (New York) Ambulance squad takes forced 
break. Due to the amount of damaged caused by a December 29 fire, the Rensselaer 
Volunteer Ambulance will be out of service until repairs are made to the garage and the 
equipment. 

Source: http://www.timesunion.com/local/article/Ambulance-squad-takes-forced- 
break-4168976.php 

24. January 4, Bloomington Pantograph - (Illinois) State prison locked down after 58 
guards call in sick. Stateville Correction Center was placed on lockdown for about 8 
hours January 4 after 58 employees called in sick. 

Source: http://www.pantagraph.com/news/state-and-regional/illinois/state-prison- 
locked-down-after-guards-call-in-sick/article If01c6e6-56cf-lle2-af5b- 
0019bb2963f4.html 
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25. January 4, Lexington Herald-Leader - (Kentucky) State shuts down McCreary 
County jail. 47 inmates from McCreary County jail were moved to another 
correctional center as the Kentucky Department of Corrections shut down the jail. 
Officials reported the facility had several unresolved issues that needed to be fixed 
before they could be in operation. 

Source: http://www.kentucky.com/2013/01/04/2464897/state-shuts-down-mccreary- 
county.html 

For another story, see item 19 
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Information Technology Sector 

26. January 7, Krebs on Security - (International) Crimeware author funds exploit 
buying spree. Researchers have tied ‘Paunch’, the author of the Blackhole exploit kit, 
to the Cool Exploit Kit, and noted that Paunch has been updating both kits with newly- 
purchased, undisclosed exploits. 

Source: http://krebsonsecurity.com/2013/01/crirneware-author-funds-exploit-buying- 
spree/ 

27. January 4, Threatpost - (International) Researchers bypass Microsoft Fix It for IE 
zero day. Exodus Intelligence researchers reported their discovery of a way to work 
around the temporary fix that Microsoft posted to address a zero day exploit in Internet 
Explorer (IE) used in recent watering hole attacks. 

Source: http://threatpost.com/en us/blogs/researchers-bypass-microsoft-fix-it-ie-zero- 
day-010413 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



28. January 6, Dearborn Patch - (Michigan) Cut cable line in Dearborn leaves WOW! 
customers with no cable, Internet Sunday. WOW! customers in Dearborn and 
Dearborn Heights lost cable, Internet, and phone service January 6 due to a severed 
cable line. 

Source: http://dearbom.patch.com/articles/cut-cable-line-in-dearborn-leaves-wow- 
customers-with-no-cable-internet-sunday 
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Commercial Facilities Sector 



29. January 7, Baton Rouge Advocate - (Louisiana) Undeterred mall shoppers back day 
after teen brawl. A flash mob at the Mall of Louisiana in Baton Rouge involving some 
200 juveniles and organized through social media Web sites ended in a fight January 5. 
Authorities arrested six juveniles from the group and closed the mall down for the rest 
of the evening. 

Source: http://theadvocate.com/news/4851684-123/undeterred-mall-shoppers-back-day 

30. January 7, KTVT 11 Fort Worth - (Texas) Storybook Ranch to be rebuilt after 
fire. The Storybook Ranch event center in McKinney was completely destroyed by a 
fire January 3. 

Source: http://dfw.cbslocal.com/2013/01/07/storvbook-ranch-to-be-rebuilt-after-fire/ 

31. January 6, Chelmsford Independent - (Massachusetts) Fast-moving fire leaves two 
dead at Chelmsford condo complex. A Chelmsford condo building was the scene of a 
fire January 6 that left two victims dead and another with serious injuries. Authorities 
were working to assist those that were displaced. 

Source: http://www.wickedlocal.com/chelmsford/xl233665192/Marshal-Two-dead-in- 
Chelmsford-condo-fire#axzz2HIm5phw2 

32. January 6, KTRK 13 Houston - (Texas) Arson investigating two fires at west 
Houston apartment complex. Two fires lit in less than 3 hours at a Houston apartment 
building January 6 displaced four fa mi lies from their severely damaged apartments. 
None of the residents heard smoke alarms and arson investigators were looking for 
leads following the event. 

Source: http://abclocal.go.com/ktrk/storv?section=news/local&id=8943869 

33. January 4, Chicago Sun-Times Media Wire - (Illinois) Skokie apartment complex 
evacuated after CO sickens residents. Firefighters evacuated the residents of a 48- 
unit apartment complex in Skokie January 4 because of a boiler leak that left high 
levels of carbon monoxide in the building. A total of six residents were taken to a local 
hospital for treatment. 

Source: http ://skokie. suntimes .com/ne ws/ 1 7 389609-4 1 8/skokie-apartment-complex- 
evacuated-after-co-sickens-residents.html 

34. January 4, Associated Press - (New York) 4 firefighters, 1 civilian injured in a 
residential blaze in Borough Park, Brooklyn. A 3-alarm fire in Brooklyn January 4 
left four firefighters and one resident with minor bums. 

Source: 

http ://w w w. therepublic ■com/view/story/b54c5643eead47 9fa0627 e4a 1 d87 6602/NY — 
Brooklyn-Fire 

For more stories, see items 6 and 12 
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National Monuments and Icons Sector 



35. January 4, Ashville Citizen-Times - (North Carolina) State quarantines walnut wood 
in Haywood County. North Carolina Department of Agriculture officials placed a 
quarantine January 3 on all walnut tree material sold in Haywood County to prevent the 
spread of thousand cankers disease after it was found on trees in Great Smoky 
Mountains National Park. 

Source: http://www.citizen-times.com/article/20 1301 04/NEWS/30 1 04004 1/State- 
quarantines-walnut-wood-Haywood-County 
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Dams Sector 

36. January 5, Rutland Herald - (Vermont) Bennington plans to remove dam for public 
safety reasons. Residents in the Bennington area applied for permission to remove the 
Henry dam on the Walloomsac River due to safety concerns that have affected local 
residents in the past. 

Source: http ://w ww.rutlandherald.com/ article/20 1301 05/NEW S02/7 0105 9928 

37. January 5, U-T San Diego - (California) Sea wall repair gets $700K State grant, 
State aids sea wall fix. A $700,000 grant from the California Department of Water 
Resources Local Levee Assistance Program was granted to assist in the crack filling 
repairs of a 900-foot sea wall and boardwalk in Mission Beach. The repairs are part of a 
$2.4 million project to repair the sea wall originally built in 1925. 

Source: http://www.utsandiego.com/news/2013/ian/05/tp-sea-wall-repair-gets-7Q0k- 
state- grant- state/ 

38. January 4, New Orleans Times -Picayune - (Louisiana) Corps says $10.3 billion, 98- 
mile Morganza to the Gulf levee plan is cost-effective. A revised $10.3 billion plan 
to construct a levee from the Morganza to the Gulf intended to protect Houma and the 
surrounding area was released by the U.S. Army Corps of Engineers January 4. The 
new proposal for the levee includes new safety features developed in the aftermath of 
Hurricane Katrina. 

Source: 

http://www.nola.com/environment/index.ssf/2013/01/corps says revised 103 billion.h 
tml 



[ Return to top ] 



-9 - 




NTAS 



NO ACTIVE ALERTS 

vvww.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 387-2341 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 10 - 




